Clik here to view.
Using QuickAdd-based user-initiated enrollment on macOS High Sierra with Jamf...
Starting with Jamf Pro 10.3, user-initiated computer enrollment now has two modes: macOS High Sierra: Uses an MDM profile to enroll the Mac, with the Jamf Pro agent being installed once MDM enrollment...
View ArticleClik here to view.
Suppressing the Data & Privacy pop-up window on macOS High Sierra
Starting with Mac OS X 10.7.2, Apple set the iCloud sign-in to pop up on the first login. In OS X 10.10, Apple added a Diagnostics & Usage window that pops up at first login after the iCloud...
View ArticleClik here to view.
Reclaiming drive space by thinning Apple File System snapshot backups
As part of a recent clean-up of my Apple File System-formatted (APFS) boot drive, I deleted a number of files. However, I noticed that deleting files did not free up nearly as much space as I thought...
View ArticleClik here to view.
Whitelisting third-party kernel extensions using profiles
As part of macOS 10.13.2, Apple introduced the concept of User Approved MDM Enrollment (UAMDM). UAMDM grants mobile device management (MDM) additional management privileges, beyond what is allowed for...
View ArticleClik here to view.
32-bit application alert message in macOS 10.13.4
Starting on April 12, 2018, Macs running macOS 10.13.4 will display a one-time alert when 32-bit applications are opened. This alert will appear once per user account on the Mac, when a relevant 32-bit...
View ArticleOracle Java 10 JDK and JRE installation scripts for macOS
Oracle has started to release Java 10 for macOS, so I’m posting a couple of scripts to download and install the following: Oracle Java 10 JDK Oracle Java 10 JRE Oracle has been releasing two separate...
View ArticleDetecting if a logged-in user on a FileVault-encrypted Mac has a Secure Token...
A challenge many Mac admins have been dealing with is the introduction of the Secure Token attribute, which is now required to be added to a user account before that account can be enabled for...
View ArticleClik here to view.
Upgrading from ESXi 6.5 to ESXi 6.7 via SSH and esxcli
Following VMware’s release of ESXi 6.7, I upgraded my ESXi 6.5 server to ESXi 6.7 using SSH and esxcli. For those interested, see below the jump for the details of the process I used. To upgrade from...
View ArticleClik here to view.
Using the Jamf Pro API to mass-delete computers and mobile devices
Periodically, it may be necessary to delete a large number of computers or mobile devices from a Jamf Pro server. However, there is currently a problem in Jamf Pro 10 where trying to delete multiple...
View ArticleClik here to view.
Disabling Jamf Pro LDAP wildcard searches to speed up user and group lookups
When setting up Jamf Pro, one of the options you have is to integrate it with your company, school or institution’s LDAP-based directory service. Connecting Jamf Pro to LDAP allows you to query your...
View ArticleClik here to view.
Updated Xcode command line tools installer script now available
A while back, I developed a script that will download and install the Xcode Command Line Tools on Macs running 10.7.x and higher. Most of the time it works fine. However, starting with macOS Sierra and...
View ArticleClik here to view.
Sending Jamf Pro notifications to Slack
One of the features offered by Jamf Pro is the ability to send notifications of various events to specified email addresses. Any Jamf Pro user account can be set up to receive these emails, so they’re...
View ArticleClik here to view.
Updated MigrateADMobileAccounttoLocalAccount script now available to fix...
A couple of years back, I wrote a script to assist with migrating AD mobile users to local users. In my testing in 2016, everything seemed to work right and I didn’t see any problems with it on OS X El...
View ArticleClik here to view.
Creating a least privileged Jamf Pro user account for Jamf Infrastructure...
As part of working with the Jamf Infrastructure Manager (JIM), I wanted to see if I could find a least-privileged way to enroll a JIM with a Jamf Pro server. As it turns out, it’s pretty...
View ArticleClik here to view.
Automating Jamf Infrastructure Manager setups on Red Hat Enterprise Linux
As part of a project, I needed to build an automated setup process for a Jamf Infrastructure Manager (JIM). Thanks to the help of some folks at Jamf, I have a process which runs non-interactively and...
View ArticleClik here to view.
Automating AutoPkg runs with autopkg-conductor
About two weeks ago, I noticed I had an SSL error cropping up with one of my AutoPkg recipes: [Errno socket error] EOF occurred in violation of protocol (_ssl.c:590) When I investigated what it meant,...
View ArticleSlides from the “Escaping the ‘Tech Whisperer’ Trap” session at Penn State...
For those who want a copy of the documentation talk given by myself and my colleague Nikki Lewandowski at the Penn State MacAdmins 2018 conference, here is a link to the slides in Keynote format....
View ArticleJoining Apple’s AppleSeed testing program
In addition to Apple’s Developer Connection program for developers, Apple also has a program called AppleSeed, which is geared towards working with enterprise customers to help them test new Apple...
View ArticleClik here to view.
Automating AutoPkg and JSSImporter setup
As part of building my autopkg-conductor solution for automating AutoPkg runs, I also wanted to automate the setup of AutoPkg and JSSImporter. My colleague Graham Pugh has written a setup script for...
View ArticleSlides from the “Providing the best Mac experience possible, from the Apple...
For those who wanted a copy of my Mac management session at at the Penn State MacAdmins 2018 conference, here are links to the slides in PDF and Keynote format. PDF – http://tinyurl.com/PSU2018SAPPDF...
View Article